MESTI, GMP and HACCP in plain language

If you have started looking into supplying a supermarket, a hotel group or an export customer, you will have been asked for at least one of these, possibly in the same sentence as halal, as though they were all versions of the same thing. They are not, and the confusion causes real problems, usually in the form of a business paying for the wrong certification.

Here is what each actually is.

MESTI

Makanan Selamat Tanggungjawab Industri, which translates roughly as safe food being the industry's responsibility. It is a Malaysian food safety certification scheme run through the Ministry of Health.

MESTI is the baseline. It covers the fundamentals of running a food premises safely: hygiene, pest control, water quality, waste handling, staff practice, basic record keeping. It is designed to be achievable by small and medium producers rather than only by large factories.

If you manufacture food in Malaysia, this is generally the first one to deal with, and for many small producers it is the only one they will need for years.

GMP

Good Manufacturing Practice. Not Malaysian specifically; it is an international concept applied across food, pharmaceuticals and cosmetics.

GMP is about how you run the operation, consistently. Documented procedures, controlled processes, trained staff, traceable materials, a building laid out so that clean and dirty flows do not cross. The animating idea is that a good product should be the predictable result of a controlled process, not something that happens when the right person is on shift.

Where MESTI asks whether your premises are safe, GMP asks whether your process is controlled.

HACCP

Hazard Analysis and Critical Control Points. This is the most rigorous of the three and the most misunderstood.

HACCP is a method, not a checklist. You map your entire process, identify every point where a hazard could enter, decide which of those points are genuinely critical, set measurable limits for each, monitor them, and document what you do when a limit is breached.

The output is not a tidier factory. It is a system that can demonstrate, with records, that the specific risks in your specific process are under control. That evidence is what large customers and export markets are actually buying.

Which one do you need

The honest answer is that your customers decide, not you.

Selling locally, small scale. MESTI. It is the expected baseline and it is achievable without restructuring your business.

Supplying supermarkets or hotel groups. Expect GMP to come up, and increasingly HACCP. Procurement departments have standard requirements and rarely make exceptions for small suppliers.

Exporting. HACCP, generally, and often additional scheme certifications depending on the destination market. This is where the requirements get expensive.

Manufacturing for someone else's brand. Whatever that brand's customers require, which means you inherit their obligations.

A practical suggestion: before pursuing any of these, ask two or three target customers what they actually require. It is a short conversation and it can save a year of effort aimed at the wrong certificate.

None of these is halal certification

This is the confusion worth clearing up properly, because it costs people money.

MESTI, GMP and HACCP are food safety and quality systems. They say nothing about whether a product is halal. Halal certification in Malaysia is a separate process, run by a different authority, against a different standard, with its own audit.

The relationship is that halal certification assumes basic hygiene competence, so a facility already running MESTI or GMP finds the halal audit considerably less painful. But holding one has never granted the other, and a customer asking for halal certification will not accept a HACCP certificate.

What this costs, roughly

Certification fees are usually the smallest part. The real costs sit elsewhere:

• Physical changes. Layout, surfaces, hand washing stations, separation between raw and finished areas. This is where the money goes.
• Documentation. Writing procedures that reflect what you actually do, then keeping records that prove you did it.
• Time. Months, mostly spent on the two items above.
• Maintenance. Certification is not a one-off. Records have to keep being kept.

That last point is where small producers most often come unstuck. Passing the audit is a project. Staying compliant is a habit, and habits are harder.

The alternative worth pricing

For a small brand, certifying your own facility may not be the right first move at all. Manufacturing through a producer who already holds the certifications means their compliance covers the production, and you carry the brand, the recipe and the customers.

It is not free and you give up some control. But compared to rebuilding a kitchen to GMP standard before your first order, the arithmetic often favours it, at least until volume justifies your own plant. Contract manufacturers work this way as a matter of course, and we keep a list of them.

Worth pricing both routes before committing to either. A surprising number of brands certify a facility they later outgrow or abandon.